Federal agencies have three weeks to close a batch of old bugs now confirmed as actively exploited.
CISA's BOD 26-04 requires federal agencies to patch critical exploited vulnerabilities within three days, replacing previous patch directives with a…